Q about azure-native: KeyVault & Certificates....
# azurec
chilly-analyst-14900
09/07/2022, 8:01 PMQ about azure-native: KeyVault & Certificates. I’ve created a cert in a KeyVault, which I can fetch via
GetSecret.Invoke()chilly-analyst-14900
09/07/2022, 8:03 PMI can get it by running
az keyvault certificate show --vault <vault> -n <certName> --query "x509ThumbprintHex" -o tsvchilly-analyst-14900
09/07/2022, 8:04 PMwhat would be the easiest way to do the same in Pulumi?
chilly-analyst-14900
09/07/2022, 8:11 PMOo, just found
Pulumi.Command Copy code
var getThumb = new Command("getThumb", new CommandArgs
{
Create = "az keyvault certificate show --vault $VAULT -n $NAME --query \"x509ThumbprintHex\" -o tsv",
Environment =
{
{ "NAME", certName },
{ "VAULT", vault.Name },
},
});m
melodic-tomato-39005
09/08/2022, 6:35 PMRetrieving the values of secrets, including certs, is not available through Pulumi since this is a data-plane operation. See this (pretty hidden) note on https://www.pulumi.com/registry/packages/azure-native/api-docs/keyvault/getsecret/#secretpropertiesresponse:
Users should use the data-plane REST service for interaction with vault secrets.Glad you found another way. Using the Azure SDK would be another one.
👍 2
c
chilly-analyst-14900
09/12/2022, 5:50 PMMakes sense. And thanks for the tip on Azure SDK — I guess that makes a lot more sense that parsing stdout 😄
5 Views